Article 6KX2K CoCo VMs On Linux Will Now Panic If RdRand Is Broken To Avoid Catastrophic Conditions

CoCo VMs On Linux Will Now Panic If RdRand Is Broken To Avoid Catastrophic Conditions

by
from Phoronix on (#6KX2K)
For confidential computing "CoCo" virtual machines where the VM host is assumed to be un-trusted and aims to be as isolated as possible, RdRand hardware random number generator instructions are one of the limited sources of entropy for guest VMs. Right now RdRand can fail and the CoCo guest VMs will continue to boot albeit with limited or no entropy to see the VM's random number generation. But being merged today as part of x86 fixes for Linux 6.9 is now requiring seeding RNG with RdRand for CoCo environments otherwise a kernel panic...
External Content
Source RSS or Atom Feed
Feed Location http://www.phoronix.com/rss.php
Feed Title Phoronix
Feed Link https://www.phoronix.com/
Reply 0 comments